I believe I have a network that someone has run a packet sniffer on it. We have a webfilter and we have seen hits to it from admin accounts and from people that aren't in the building when the hits happen. There is something weird going on. Any suggestions as to finding the possible sniffer? Luckily so far, nothing on the servers has changed, but it is only a mater of time. Thanks in advance for the help.